{"id":"CVE-2020-8561","details":"A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user can view kube-apiserver logs when the log level is set to 10, they can view the redirected responses and headers in the logs.","aliases":["GHSA-74j8-88mm-7496"],"modified":"2026-08-07T15:14:52.870479Z","published":"2021-09-20T17:15:08.187Z","related":["CGA-73pm-7j6q-74x4","openSUSE-SU-2026:11388-1","openSUSE-SU-2026:11389-1","openSUSE-SU-2026:11390-1","openSUSE-SU-2026:11391-1"],"references":[{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20211014-0002/"},{"type":"REPORT","url":"https://github.com/kubernetes/kubernetes/issues/104720"},{"type":"ARTICLE","url":"https://groups.google.com/g/kubernetes-security-announce/c/RV2IhwcrQsY"},{"type":"ARTICLE","url":"https://kubernetes.io/blog/2026/05/26/reconciling-unfixed-kubernetes-cves/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kubernetes/kubelet","events":[{"introduced":"544b7f5b5cd8483cc60cd1844269b9a49ebc9c93"},{"last_affected":"e9e6d137615cdf3f1f03baeee8ddc8601fc7e79a"}],"database_specific":{"extracted_events":[{"introduced":"1.20.11-NA"},{"last_affected":"1.20.11-NA"},{"introduced":"1.21.5-NA"},{"last_affected":"1.21.5-NA"},{"introduced":"1.22.2-NA"},{"last_affected":"1.22.2-NA"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:kubernetes:kubernetes:1.20.11:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.21.5:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.22.2:-:*:*:*:*:*:*"]}}],"versions":["1.20.11-NA","1.21.5-NA","1.22.2-NA"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8561.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/kubernetes/kubernetes","events":[{"introduced":"27522a29febbcc4badac257763044d0d90c11abd"},{"last_affected":"8b5a19147530eaac9476b0ab82980b4088bbc1b2"}],"database_specific":{"source":"CPE_STRING","cpe":["cpe:2.3:a:kubernetes:kubernetes:1.20.11:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.21.5:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.22.2:-:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.20.11-NA"},{"last_affected":"1.20.11-NA"},{"introduced":"1.21.5-NA"},{"last_affected":"1.21.5-NA"},{"introduced":"1.22.2-NA"},{"last_affected":"1.22.2-NA"}]}}],"versions":["1.20.11-NA","1.21.5-NA","1.22.2-NA"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8561.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N"}]}